בס״ד

Free DNS Lookup, IP Geolocation & Network Tools

DNSX is a free set of DNS lookup, IP geolocation, SSL, WHOIS and email diagnostic tools. Every tool has a web page and a JSON URL you can call with curl.

Five resolvers side by side

Compare Google, Cloudflare, Quad9, OpenDNS and the authoritative answer in one view

Authoritative nameserver queries

Ask the zone’s own nameservers directly and skip every cache

JSON from every tool

Every tool answers curl with JSON, ready for scripts and monitoring

200 free lookups a day

No account, no API key, no signup form

Works from the Command Line

Every tool has a URL that returns JSON. Call it with curl, no API key needed.

$ curl https://api.dnsx.dev/ip/my-ip
$ curl https://api.dnsx.dev/dns/a/google.com
$ curl https://api.dnsx.dev/ssl/github.com
$ curl https://api.dnsx.dev/ip/my-ip
{
  "ip": "203.0.113.42",
  "hostname": "example.isp.net",
  "geo": {
    "country": "United States",
    "city": "San Francisco",
    "timezone": "America/Los_Angeles"
  },
  "asn": {
    "number": "AS12345",
    "name": "Example ISP"
  }
}

All DNSX tools

Every lookup page on the site. Each one also answers as JSON.

DNS lookups

What is DNSX?

DNSX is a free set of network diagnostic tools for developers, system administrators and IT professionals. It covers DNS lookups, IP geolocation, SSL certificate checks, WHOIS and email authentication, through a web interface at dnsx.dev and a JSON API at api.dnsx.dev that use the same family and tool names.

Every tool works from the command line. A curl request to any api.dnsx.dev URL returns JSON, so the same checks fit into shell scripts, CI pipelines and monitoring jobs. There is no account and no API key. Each IP address gets 200 lookups a day.

Available Tools

DNS Lookup queries records from Google, Cloudflare, Quad9 and OpenDNS, or from the domain's own authoritative nameservers. It supports A, AAAA, MX, TXT, CNAME, NS, SOA, SRV, NAPTR and CAA records. Compare All puts the five answers side by side to show propagation problems, and MX and NAPTR lookups draw the full resolution chain with the location of each host.

IP Lookup returns the geolocation, ASN, organization and RDAP registration data for any IPv4 or IPv6 address, and flags addresses that belong to known hosting providers or VPN services. The What Is My IP page shows your own IPv4 and IPv6 address.

SSL Checker connects to a domain on port 443 and reports the certificate's validity, expiry date, chain, negotiated TLS version and Subject Alternative Names, with a grade from A+ to F.

WHOIS Lookup retrieves the registration record for a domain: registrar, creation and expiry dates, nameservers and status codes, with the raw WHOIS text available as well.

Email Tools check a domain's MX records, validate its SPF record, read its DMARC policy, fetch DKIM keys by selector and look the mail server up on DNS blocklists.

Security Tools include a random password generator, a Diceware passphrase generator, a hash generator (MD5, SHA-1, SHA-256, SHA-512, bcrypt) and a one-time secret link encrypted in the browser with AES-256-GCM.

Frequently Asked Questions

What tools does DNSX offer?▼
DNSX provides free DNS lookup (A, AAAA, MX, TXT, CNAME, NS, SOA, SRV, NAPTR and CAA records), IP geolocation and ASN lookup, SSL/TLS certificate checking, WHOIS domain registration lookup, email diagnostics (MX, SPF, DMARC, DKIM and blacklist checks), and security tools for generating passwords, passphrases and hashes and for sharing encrypted one-time secrets.
Is DNSX free to use?▼
Yes. Every DNSX tool is free from the website and from the JSON API, with no account required. Each IP address gets 200 lookups a day. All tools can also be called from the command line with curl, for example "curl https://api.dnsx.dev/ip/my-ip".
Can I use the DNSX API from the command line?▼
Yes. Every DNSX tool answers curl with JSON. For example, "curl https://api.dnsx.dev/dns/a/google.com" returns DNS records, "curl https://api.dnsx.dev/ip/my-ip" returns your public IP address, "curl https://api.dnsx.dev/ssl/github.com" checks an SSL certificate, and "curl https://api.dnsx.dev/whois/example.com" returns WHOIS data. No API key is needed.
How does DNSX compare DNS results from multiple resolvers?▼
DNSX queries Google (8.8.8.8), Cloudflare (1.1.1.1), Quad9 (9.9.9.9), OpenDNS (208.67.222.222) and the domain’s authoritative nameservers at the same time. The Compare All view shows the five answers side by side and marks whether they agree, which is the quickest way to spot a resolver still serving a stale record after a DNS change.
Does DNSX cache results?▼
DNS lookups on DNSX are not cached, so every query is sent to the resolver you picked. IP geolocation and RDAP results are cached for 24 hours, and SSL and WHOIS results are cached for one hour, so a certificate or registration record you just changed can take that long to update.